Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 4322 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Enterprise Console error message

Jason-SHS

Hi All,

I have just installed my Sophos Enterprise Console and following are the 5 error messages I got it from 4 different user pc.

1) e03d0005 -- The on-access driver failed to read from file \xxxxx\SophosUpdate\CIDs\S000\SAVSCFXP\master.upd

2) a020000c --  Unknown error 0x80070017 decomposing "C:\WINDOWS\$NtUninstallKB971513$\spuninst\".

3) e03d0005 --  The on-access driver failed to read from file \xxxxx\SophosUpdate\CIDs\S000\SAVSCFXP\customer_ID.txt. 

4) a0250029 --  Registry key "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{F0626A63-410B-45E2-99A1-
                        3F2475B2D695}" could not be removed.

5) Adware or PUA       Cleanup in progress (started 31/03/2011 4:23:20 PM)       Make The Web Better        Other 

No 4 & 5 are from same PC. I have cleaned the No 5 but when I scan again, the problem shown again.

6) Another problem I have is after I installed the Sophos Enterprise Console, my schedule backup run much slower.

7) I will like to know if I do a remote scan or schedule scan, is there any way I can stop it half way?

8) If there is virus , adware or malware is uncleanable, what should I do with it ?

Greatly appreciate if anyone can advise me what went wrong for all the above mention error / problem.

Thanks in advance.

Jason

:11315


This thread was automatically locked due to age.
  • 0

    Hello Jason,

    I understand that you want an answer for all these questions but please try to "cluster" and categorize them and in the future use individual posts/threads for different topics.

    1)-3) are very likely transient errors so you just acknowledge them

    4)-5) I have cleaned the No 5 - did it say "Cleaned up" as 4) indicates an error during cleanup? The Anti-Virus log (SAV.txt) on the client might contain additional information and it will also tell you what lead to the Make The Web Better detection. Could be just the mentioned key which obviously can't be deleted automatically. You should delete it manually.

    6) how much is much and are you talking about your server or all the clients? Details of your setup would help in answering this question - OS and Sophos version, settings for on-access scan, backup product and backup type. 

    7) You can't stop a scan from the console but locally on the client

    8) The question is too general. If it can't be cleaned up automatically or from the console please look up the instructions for the particular threat. Some adware can only be uninstalled locally. If cleanup fails or the instructions are not clear feel free to post here but please specify the exact name of the threat, where it has been found (path and filename) and ideally include the relevant part of SAV.txt.

    HTH

    Christian

    :11321
  • 0

    Hi Christian,

    Thanks for all your advise.

    Sure I'm here to look for solution and all the issues I mention I here are from my Sophos Enterprise Console with Endpoint Client.

    My backup (for Exchange X1, ADC x 1, file servers x3) normally finished by 9 hours but after installed the Sophos, my backup take 14 hours to finish. OS is Windows Server 2003 (SP2). Tried enable and disable on-access scan and backup is still slow. Using Symantec Backup Exec 11D with LTO backup tape.

    Regards,

    Jason

    :11375
  • 0

    HI,

    This post has a couple of things you could try:
    /search?q= 7851

    Regards,

    Jak

    :11379
  • 0

    Hi Jak,

    Wow..... Thanks for your advise....

    I need time to read through and understand it.

    Cheers...

    Jason

    :11437
Unfiltered HTML